Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58e9a629-4feb-3da7-8c39-422b216ebda2.roa
File:                     58e9a629-4feb-3da7-8c39-422b216ebda2.roa (raw, json)
Hash identifier:          xkKBRo73iLVg5WpWpC6yK6z/REqONnuLx4tHsvhcLPs=
Subject key identifier:   AD:33:7B:09:B0:1F:ED:BA:78:B1:47:90:A4:3C:61:35:73:48:85:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E90BA4E3BB53FBADCFBFF5480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58e9a629-4feb-3da7-8c39-422b216ebda2.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        168.93.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4e:3b:b5:3f:ba:dc:fb:ff:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=4ddc06e9-9070-4bfe-89aa-231a2e1396bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:c6:04:e1:f9:51:7a:86:9c:ce:0b:1d:78:
                    40:4d:2e:87:01:93:c5:34:6f:ff:54:6b:48:8c:2d:
                    5f:d9:a1:7e:d0:dd:25:85:ba:cc:5d:c5:25:a8:60:
                    10:e4:a9:79:46:4f:eb:3d:4b:15:6d:9d:a2:cf:24:
                    c0:a7:49:77:c2:fb:fa:ca:c9:5d:7d:eb:3c:4f:54:
                    6a:35:0f:14:e6:d9:da:84:43:e3:82:7d:c7:4b:44:
                    d3:61:26:41:b6:d2:f2:98:17:ad:01:6d:e6:1d:ea:
                    d5:7d:52:df:ed:f2:81:e7:0a:56:5d:cc:68:28:58:
                    86:06:4b:bd:fd:0b:32:6d:2d:b4:2d:e7:96:e8:6e:
                    2b:d6:53:90:41:27:07:19:8f:6b:9e:ce:2a:75:00:
                    d4:02:23:5f:a7:10:44:b2:11:ac:7c:44:51:ee:1e:
                    b5:b9:1d:8a:1a:f7:0a:f4:43:19:84:e4:b2:4a:cf:
                    55:cd:56:27:41:8c:2a:6b:c9:36:63:bf:e6:60:4f:
                    3f:c0:42:d4:77:53:ca:e3:3d:8d:ec:9b:9d:92:3e:
                    b6:ae:4f:78:27:44:81:34:a7:75:af:3d:00:94:b0:
                    20:ee:9e:ef:ec:a4:d9:80:af:39:0d:40:df:88:fa:
                    0e:75:28:72:17:3c:98:b0:3a:33:c0:ac:1b:e3:fd:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:33:7B:09:B0:1F:ED:BA:78:B1:47:90:A4:3C:61:35:73:48:85:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58e9a629-4feb-3da7-8c39-422b216ebda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d7:43:0a:61:46:af:cd:3c:37:f4:e8:48:c2:34:3e:7f:79:
         6c:eb:88:27:9f:25:3b:53:9e:f2:0c:98:f7:8f:44:ad:bf:a8:
         e8:3e:ff:bd:9a:8c:7c:16:02:23:1d:e3:10:18:6e:ef:dc:41:
         e8:31:4b:df:f7:bb:f1:bc:50:0f:0c:9b:b7:30:2d:14:a8:99:
         34:00:ac:6f:e8:e3:fe:90:2d:2b:f7:4d:5e:6c:fc:3b:23:70:
         da:a2:dd:94:b7:c5:94:73:0c:09:96:ea:2c:ce:8c:b5:1a:a2:
         0f:b4:06:5d:2f:92:7c:0d:c9:6f:65:87:5d:98:f6:58:0c:8b:
         fa:5c:27:0a:b2:ed:f3:f5:91:39:16:e7:e7:5d:4c:d6:18:4c:
         3c:b4:71:01:26:49:11:59:d5:a7:a5:84:08:63:e2:c5:ab:e2:
         01:e9:a7:74:6b:ea:27:95:96:f4:f5:38:fb:fa:e1:1b:3f:1b:
         0f:7b:1f:c2:58:54:d5:1b:cd:6c:a1:d5:96:52:64:6c:5c:3b:
         19:89:3a:bf:18:93:f8:9a:db:69:36:e3:1d:b5:be:df:88:59:
         28:6f:35:45:69:aa:df:b9:09:ba:04:1d:fc:52:00:08:48:64:
         6e:e2:c0:bb:a9:dc:11:0e:57:31:52:d1:15:5e:c8:c7:c1:78:
         dd:b7:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:04 2026 by rpki-client